Executive brief
Missing permission check in Jenkins GitLab Plugin
Affected products
- Maven org.jenkins-ci.plugins:gitlab-plugin
Junglewise Threat Intelligence
CVE-2022-30955: Missing permission check in Jenkins GitLab Plugin
CVE-2022-30955 · Severity: low · CVSS 3.1 · Published 2022-05-18
Technologies: org.jenkins-ci.plugins:gitlab-plugin (Maven). Vendors: Maven.
Related threats
- Incorrect permission check in Jenkins GitLab Plugin allows enumerating credentials IDs
- Non-constant time webhook token comparison in Jenkins GitLab Plugin
- Cross-site Scripting in Jenkins GitLab Plugin
- Jenkins GitLab Plugin Cross-Site Request Forgery vulnerability
- Jenkins GitLab Plugin missing permission checks